Skip to content
OpenAdvisories

Vendor

sonicdoe

3 known vulnerabilities.

Products

detect-character-encoding 2 ced 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2021-39176

    Missing Release of Memory after Effective Lifetime in detect-character-encoding

    detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1.

    sonicdoe detect-character-encoding detect-character-encoding npm
  • High 7.5
    CVE-2021-39157

    Improper Handling of Exceptional Conditions in detect-character-encoding

    detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in [detect-character-encoding v0.7.0…

    sonicdoe detect-character-encoding detect-character-encoding npm
  • High 7.5
    CVE-2021-39131

    Improper Handling of Unexpected Data Type in ced

    ced detects character encoding using Google’s compact_enc_det library. In ced v0.1.0, passing data types other than `Buffer` causes the Node.js process to crash. The problem has been patched in ced v1.0.0. As a workaround, before passing an argument to ced, v…

    sonicdoe ced ced npm